AWS CloudTrail S3 Data Events allow you to record API actions on Amazon S3 objects and receive detailed information such as the AWS account of the caller, IAM user role of the caller, time of the API call, IP address of the API, and other details. You can programmatically access and act upon the Data Events after they are delivered to an Amazon S3 bucket or to Amazon CloudWatch Events. For example, you can quickly reapply the original Access Control List (ACL) on an object if the ACL of an object is modified.

AWS CloudTrail S3 Data Events are available in all AWS public regions. Please visit here to see the full list of supported regions.